source: murachi/murachi/src/main/java/ve/gob/cenditel/murachi/JaxRsFilterAuthentication.java @ 5d188ab

package ve.gob.cenditel.murachi;

import javax.ws.rs.WebApplicationException;
import javax.ws.rs.container.ContainerRequestContext;
import javax.ws.rs.container.ContainerRequestFilter;
import javax.ws.rs.core.Response;
import javax.ws.rs.core.Response.Status;
import javax.ws.rs.ext.Provider;

/**
 * Filtro para realizar autenticación basica HTTP.
 * 
 * @author aaraujo
 *
 */
@Provider
@Authenticator
public class JaxRsFilterAuthentication implements ContainerRequestFilter {
        public static final String AUTHENTICATION_HEADER = "Authorization";

        @Override
        public void filter(ContainerRequestContext containerRequest)
                        throws WebApplicationException {

                String authCredentials = containerRequest
                                .getHeaderString(AUTHENTICATION_HEADER);

                // better injected
                AuthenticationService authenticationService = new AuthenticationService();

                boolean authenticationStatus = authenticationService
                                .authenticate(authCredentials);

                if (!authenticationStatus) {
                        //throw new WebApplicationException(Status.UNAUTHORIZED);
                        
                        String errorMessage = "{\"error\":\"acceso no autorizado\"}";
                        Response response = Response.status(Status.UNAUTHORIZED).entity(errorMessage).build();
                        
                        throw new WebApplicationException(response);
                        
                }

        }
}